65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill claims a private file (secret.md) should have been excluded but the published package includes it (and even embeds its contents), which is an incoherence and exposes sensitive-looking data.

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773142865621,
        "_id": "k97f9d6cahkzexvc2vpyay82yh82ngnh",
        "changelog": "- Initial release of hello-example, a minimal skill to demonstrate proper use of .clawhubignore.\n- Tests that secret.md is excluded from published versions to verify the ignore mechanism works correctly.",
        "changelogSource": "user",
        "createdAt": 1773142865621,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Shiwen Han",
        "handle": "tshogx",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/46259514?v=4",
        "kind": "user",
        "linkedUserId": "kn72nmftcmwzwneps1jbkxwf1982944n"
    },
    "ownerHandle": "tshogx",
    "skill": {
        "_creationTime": 1773142865621,
        "_id": "kd74qdwm0bs8ttaqv9886zm4jn82mzk0",
        "badges": [],
        "createdAt": 1773142865621,
        "displayName": "hello-example",
        "latestVersionId": "k97f9d6cahkzexvc2vpyay82yh82ngnh",
        "ownerUserId": "kn72nmftcmwzwneps1jbkxwf1982944n",
        "slug": "hello-example",
        "stats": {
            "comments": 0,
            "downloads": 139,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "A minimal example skill demonstrating .clawhubignore — the secret.md file should NOT appear in the published version.",
        "tags": {
            "latest": "k97f9d6cahkzexvc2vpyay82yh82ngnh"
        },
        "updatedAt": 1773142885138
    }
}